| Author |
Message |
Alex Tager
Guest
|
Posted:
Mon Dec 20, 2004 1:37 pm Post subject:
Users Listed in the Managed by Box Are Unable to Manage Grou |
|
|
Hi,
I have multi-domain AD 2000 forest in our organization.
Most of DC controllers are Windows 2003 .
Our Exchange 2003 server is in the same site as one of Global Catalog
servers.
Any user including Domain Admins or Enterprise Admins can't change
membership of Universal Distribution Groups
in Outlook 2002 or 2003.
I tried Microsoft knowledgebase articles :
http://support.microsoft.com/kb/281489/EN-US/
and
http://support.microsoft.com/default.aspx?scid=kb;en-us;319206
but it doesn't help.
What can be the problem ?
Alex Tager
IT admin
|
|
| Back to top |
|
 |
Al Mulnick
Guest
|
Posted:
Tue Dec 21, 2004 7:53 am Post subject:
Re: Users Listed in the Managed by Box Are Unable to Manage |
|
|
Eh? Did you follow those articles correctly?
Keep in mind two things: the managed by feature is a 2003 AD feature. You
can't use it in non-W2K3 domains. You may need the entire forest to be in
FFL 2K3 but I'm too lazy to check at the moment ;)
The other thing is that in order to change/manage group membership, you MUST
have write access to the group. You don't have that necessarily if you have
multi-domains. Can you confirm that the user that wants to modify the group
membership is also in the same domain and using a GC from the same domain
that a) they are in and b) the group is in as well?
Al
"Alex Tager" <alex_t122000@yahoo.com> wrote in message
news:O3Z%23fbm5EHA.1392@tk2msftngp13.phx.gbl...
| Quote: | Hi,
I have multi-domain AD 2000 forest in our organization.
Most of DC controllers are Windows 2003 .
Our Exchange 2003 server is in the same site as one of Global Catalog
servers.
Any user including Domain Admins or Enterprise Admins can't change
membership of Universal Distribution Groups
in Outlook 2002 or 2003.
I tried Microsoft knowledgebase articles :
http://support.microsoft.com/kb/281489/EN-US/
and
http://support.microsoft.com/default.aspx?scid=kb;en-us;319206
but it doesn't help.
What can be the problem ?
Alex Tager
IT admin
|
|
|
| Back to top |
|
 |
Rich Matheisen [MVP]
Guest
|
Posted:
Tue Dec 21, 2004 8:00 am Post subject:
Re: Users Listed in the Managed by Box Are Unable to Manage |
|
|
"Alex Tager" <alex_t122000@yahoo.com> wrote:
| Quote: | I have multi-domain AD 2000 forest in our organization.
Most of DC controllers are Windows 2003 .
Our Exchange 2003 server is in the same site as one of Global Catalog
servers.
Any user including Domain Admins or Enterprise Admins can't change
membership of Universal Distribution Groups
in Outlook 2002 or 2003.
|
In the Outlook client, open the address book, make sure the "Global
Addres List" is in the "show names from" drop-down list box. Put the
cursor into the box and right-click. Click on the "Properties?" menu
and you'll see the GC being used as the source of the address list.
If the domain of the GC is different to the domain of the user or the
distribution group then they can't change anything because the GC
doesn't have a writable copy of the group.
--
Rich Matheisen
MCSE+I, Exchange MVP
MS Exchange FAQ at http://www.swinc.com/resource/exch_faq.htm
|
|
| Back to top |
|
 |
Alex Tager
Guest
|
Posted:
Sun Dec 26, 2004 5:15 pm Post subject:
Re: Users Listed in the Managed by Box Are Unable to Manage |
|
|
I have solved the problem by configuring the sub-domain
DC as additional Global Catalog .
Now it contains a full set of all objects in its own domain ,that is
writable for users from the same domain .
Before this change we have had one GC for each site ,that belonged to the
parent domain .
Thanks for the help
"Al Mulnick" <amulnick_No_SPAM@ncDOTrr.com> wrote in message
news:eyJFQ$v5EHA.1264@TK2MSFTNGP12.phx.gbl...
| Quote: | Eh? Did you follow those articles correctly?
Keep in mind two things: the managed by feature is a 2003 AD feature. You
can't use it in non-W2K3 domains. You may need the entire forest to be in
FFL 2K3 but I'm too lazy to check at the moment ;)
The other thing is that in order to change/manage group membership, you
MUST have write access to the group. You don't have that necessarily if
you have multi-domains. Can you confirm that the user that wants to
modify the group membership is also in the same domain and using a GC from
the same domain that a) they are in and b) the group is in as well?
Al
"Alex Tager" <alex_t122000@yahoo.com> wrote in message
news:O3Z%23fbm5EHA.1392@tk2msftngp13.phx.gbl...
Hi,
I have multi-domain AD 2000 forest in our organization.
Most of DC controllers are Windows 2003 .
Our Exchange 2003 server is in the same site as one of Global Catalog
servers.
Any user including Domain Admins or Enterprise Admins can't change
membership of Universal Distribution Groups
in Outlook 2002 or 2003.
I tried Microsoft knowledgebase articles :
http://support.microsoft.com/kb/281489/EN-US/
and
http://support.microsoft.com/default.aspx?scid=kb;en-us;319206
but it doesn't help.
What can be the problem ?
Alex Tager
IT admin
|
|
|
| Back to top |
|
 |
|
|
|
|